Entitlements

RSS for tag

Entitlements allow specific capabilities or security permissions for your apps.

Entitlements Documentation

Pinned Posts

Posts under Entitlements tag

165 Posts
Sort by:
Post not yet marked as solved
0 Replies
153 Views
Hi everyone! I have some issue with universal links. I follow this document from App Search Programming Guide And I create 3 apps associated with the same page and settings. It works perfectly when I read the QR code with native camera. But when I read a QR code with the QR Code Scanner from Control Center always opens App1 Example: I select App3 Show App3 Icon But open App1!!! I configure my AASA file something like this: `{   "applinks": {     "apps": [],     "details": [{         "appID": "TeamId.bundleApp1",         "paths": [           "*"         ]       },       {         "appID": "TeamId.bundleApp2",         "paths": [           "*"         ]       },       {         "appID": "TeamId.bundleApp3",         "paths": [           "*"         ]       }     ]   } }` Thanks!!!
Posted
by Alexseed.
Last updated
.
Post not yet marked as solved
0 Replies
162 Views
I've an app which uses associated domains capability to enable universal links and password saving. Both features are working, except for one tiny detail. There are two domains associated with the app. Primary domain is the one commonly used to access the web app and the secondary domain is added due to historic reasons and handling universal links to older domain. When user sign in to the app using username and password it always gets saved against the secondary domain name and not the primary one. I tried changing the order in which the domains are defined in the entitlements file but no joy. I even tried adding webcredentials key to ASA file under both domains and that didn't work as well. Is there a way to direct iOS to prefer one domain over the other so that credential gets saved against the primary domain?
Posted
by aswin_sk.
Last updated
.
Post not yet marked as solved
0 Replies
158 Views
Hi guys! I'm having some issues geting Universal Links to work. I have uploaded an association file to my website. I have added applink Entitlements to my app. Now... I can see in my phone, Settings->Developer->Universal Links->Diagnostics, that my URL "Opens Installed Application". But when i click the URL in an email or messenger, it just opens in safari. Any ideas?
Posted Last updated
.
Post not yet marked as solved
0 Replies
163 Views
Hello, I need to use NFC for a project. My problem is that always when im entering with my Phone a RFID field Apple Pay shows up instead of just my NFC application. I know that you can suppress Apple Pay with adding com.apple.developer.passkit.pass-presentation-suppression to the Entitlements File but my Problem is that this Entitlement also suppresses NFC which I need. How can I suppress Apple Pay but use NFC? Thanks for Help!
Posted Last updated
.
Post not yet marked as solved
1 Replies
556 Views
When I download my provisioning profile I can't find the com.apple.developer.carplay-audio entitlement in it. Here's what I did: For our app identifier on Apple Developer Portal in "Additional Capabilities" I enabled "CarPlay Audio App (CarPlay framework)". After that I generated a provisioning profile and downloaded it. In the provisional profile info on Apple Developer Portal I can see "CarPlay Audio App (CarPlay framework)" in "Enabled Capabilities". When I import the downloaded profile in Xcode, I can't see the CarPlay entitlement there. After I added the "com.apple.developer.carplay-audio" entitlement to my .entitlements file, I'm getting the "Provisioning profile ... doesn't include the com.apple.developer.carplay-audio entitlement.". When I'm opening the profile in my text editor, I also can't find "carplay-audio" there. Is there a way to solve this problem?
Posted
by algrid.
Last updated
.
Post not yet marked as solved
11 Replies
7.1k Views
Hey devs, I have a really weird issue and at this point I cannot determine is it a Big Sur 11.1 or M1 issue or just some macOS settings issue. Short description programatically (from node, electron) I'd like to store x509 cert to keychain. I got the following error message: SecTrustSettingsSetTrustSettings: The authorization was denied since no user interaction was possible. (1) I could reproduce this issue on: a brand new mac mini with M1 chip and Big Sur 11.1 another brand new mac mini with M1 chip and Big Sur 11.1 a 2018 MacBook pro with Intel chip and Big Sur 11.1 I couldn't reproduce this issue on: 2020 MacBook pro with intel i9 chip and Big Sur 11.1 2020 MacBook pro with intel i9 chip and Big Sur 11.0 How am I trying to store the cert node test.js test.js const { exec } = require('child_process') exec( 	`osascript -e 'do shell script "security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /Users/kotapeter/ssl/testsite.local.crt" with prompt "Test APP wants to store SSL certification to keychain." with administrator privileges'`, 	(error, stdout, stderr) => { 		if (error) { 			console.log(error.stack) 			console.log(`Error code: ${error.code}`) 			console.log(`Signal received: ${error.signal}`) 		} 		console.log(`STDOUT: ${stdout}`) 		console.log(`STDERR: ${stderr}`) 		process.exit(1) 	} ) testsite.local.crt: ----BEGIN CERTIFICATE MIIDUzCCAjugAwIBAgIUD9xMnL73y7fuida5TXgmklLswsowDQYJKoZIhvcNAQEL BQAwGTEXMBUGA1UEAwwOdGVzdHNpdGUubG9jYWwwHhcNMjEwMTE3MTExODU1WhcN NDEwMTEyMTExODU1WjAZMRcwFQYDVQQDDA50ZXN0c2l0ZS5sb2NhbDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANM08SDi06dvnyU1A6//BeEFd8mXsOpD QCbYEHX/Pz4jqaBYwVjD5pG7FkvDeUKZnEVyrsofjZ4Y1WAT8jxPMUi+jDlgNTiF jPVc4rA6hcGX6b70HjsCACmc8bZd+EU7gm4b5eL6exTsVzHc+lFz4eQFXgutYTL7 guDQE/gFHwqPkLvnfg3rgY31p3Hm/snL8NuD154iE9O1WuSxEjik65uOQaewZmJ9 ejJEuuEhMA8O9dXveJ71TMV5lqA//svDxBu3zXIxMqRy2LdzfROd+guLP6ZD3jUy cWi7GpF4yN0+rD/0aXFJVHzV6TpS9oqb14jynvn1AyVfBB9+VQVNwTsCAwEAAaOB kjCBjzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIC9DA7BgNVHSUENDAyBggrBgEFBQcD AQYIKwYBBQUHAwIGCCsGAQUFBwMDBggrBgEFBQcDBAYIKwYBBQUHAwgwHQYDVR0O BBYEFDjAC2ObSbB59XyLW1YaD7bgY8ddMBkGA1UdEQQSMBCCDnRlc3RzaXRlLmxv Y2FsMA0GCSqGSIb3DQEBCwUAA4IBAQBsU6OA4LrXQIZDXSIZPsDhtA7YZWzbrpqP ceXPwBd1k9Yd9T83EdA00N6eoOWFzwnQqwqKxtYdl3x9JQ7ewhY2huH9DRtCGjiT m/GVU/WnNm4tUTuGU4FyjSTRi8bNUxTSF5PZ0U2/vFZ0d7T43NbLQAiFSxyfC1r6 qjKQCYDL92XeU61zJxesxy5hxVNrbDpbPnCUZpx4hhL0RHgG+tZBOlBuW4eq249O 0Ql+3ShcPom4hzfh975385bfwfUT2s/ovng67IuM9bLSWWe7U+6HbOEvzMIiqK94 YYPmOC62cdhOaZIJmro6lL7eFLqlYfLU4H52ICuntBxvOx0UBExn----END CERTIFICATE testsite.local.key: ----BEGIN RSA PRIVATE KEY MIIEpQIBAAKCAQEA0zTxIOLTp2+fJTUDr/8F4QV3yZew6kNAJtgQdf8/PiOpoFjB WMPmkbsWS8N5QpmcRXKuyh+NnhjVYBPyPE8xSL6MOWA1OIWM9VzisDqFwZfpvvQe OwIAKZzxtl34RTuCbhvl4vp7FOxXMdz6UXPh5AVeC61hMvuC4NAT+AUfCo+Qu+d+ DeuBjfWnceb+ycvw24PXniIT07Va5LESOKTrm45Bp7BmYn16MkS64SEwDw711e94 nvVMxXmWoD/+y8PEG7fNcjEypHLYt3N9E536C4s/pkPeNTJxaLsakXjI3T6sP/Rp cUlUfNXpOlL2ipvXiPKe+fUDJV8EH35VBU3BOwIDAQABAoIBAQDDGLJsiFqu3gMK IZCIcHCDzcM7Kq43l2uY9hkuhltrERJNle70CfHgSAtubOCETtT1qdwfxUnR8mqX 15T5dMW3xpxNG7vNvD/bHrQfyc9oZuV6iJGsPEreJaV5qg/+E9yFzatrIam0SCS7 YL6xovPU58hZzQxuRbo95LetcT2dSBY33+ttY7ayV/Lx7k6nh0xU6RmTPHyyr8m7 yHpoJoSxdT/xv5iBSZ8mM9/2Vzhr14SWipVuwVVhDSfbn8ngHpIoQDkaJLMpWr+m 4z3PqfftAwR6s6i96HnhYLnRir618TQh4B9IEngeEwCMn4XAzE3L+VTaKU1hg9el aMfXzPERAoGBAPa+sJ2p9eQsv0vCUUL8KeRWvwjDZRTd+YAIfpLMWrb0tMmrBM4V V0L2joF76kdDxt1SAlHoYCT/3Rn8EPmK0TN3MEskiXQ7v57iv+LZOZcpe0ppG/4A ZihF9+wUjFCDw4ymnRQD463535O6BgZV+rcZksFRD2AwvEjt1nYm93VXAoGBANsh AYM+FPmMnzebUMB0oGIkNkE9nVb9MPbQYZjEeOeHJqmt1Nl6xLuYBWTmWwCy7J4e QPtnuMCdO6C1kuOGjQPBFIpeyFMzll+E3hKzicumgCpt5U8nTZoKc/jZckRD7n3p lbYYgHOR3A/3GCDK5L3rwziWpSRAGMSCQylvkOC9AoGBAKLfZL3t/r3LO8rKTdGl mhF7oUYrlIGdtJ/q+4HzGr5B8URdeyJ9u8gb8B1Qqmi4OIDHLXjbpvtFWbFZTesq 0sTiHCK9z23GMsqyam9XbEh3vUZ082FK6iQTa3+OYMCU+XPSV0Vq+9NPaWGeHXP5 NTG/07t/wmKASQjq1fHP7vCpAoGBAK4254T4bqSYcF09Vk4savab46aq3dSzJ6KS uYVDbvxkLxDn6zmcqZybmG5H1kIP/p8XXoKCTBiW6Tk0IrxR1PsPHs2D3bCIax01 /XjQ1NTcYzlYdd8gWEoH1XwbJQWxHINummBTyowXguYOhVhM9t8n+eWbn1/atdZF 2i+vS3fhAoGAYKw6rkJfTSEswgBKlQFJImxVA+bgKsEwUti1aBaIA2vyIYWDeV10 G8hlUDlxvVkfwCJoy5zz6joGGO/REhqOkMbFRPseA50u2NQVuK5C+avUXdcILJHN zp0nC5eZpP1TC++uCboJxo5TIdbLL7GRwQfffgALRBpK12Vijs195cc=----END RSA PRIVATE KEY What I've already found If I run the following command from terminal It asks my password first in terminal and after that It asks my password again in OS password prompt. sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /Users/kotapeter/ssl/testsite.local.crt It looks like I'm getting the above error message because osascript hides the second password asking dialog. The cert always gets stored in keychain but when I get the error message the cert "Trust" value is not "Always Trust". References StackOverflow question: https://stackoverflow.com/questions/65699160/electron-import-x509-cert-to-local-keychain-macos-the-authorization-was-deni opened issue on sudo-prompt electron package: https://github.com/jorangreef/sudo-prompt/issues/137
Posted
by peterkota.
Last updated
.
Post not yet marked as solved
1 Replies
202 Views
Hi! I am trying to archive my flutter app and creating an app identifier with (Groups, Associated domains, Push notifications, Sign in apple) but "Apple pay payment processing" is capability automatically added and when I create Profile provisioning its giving Provisioning profile "MSPP" doesn't support the Apple Pay capability. Provisioning profile "MSPP" doesn't include the com.apple.developer.in-app-payments entitlement. errors on xcode. I tryed to uncheck "Apple pay payment processing" in identifier and recreate Profile provioning but error reoccuring , any help, suggession very appreciated , thank you very much
Posted Last updated
.
Post marked as solved
7 Replies
1.1k Views
Good morning We're happy to have access to Xcode Cloud. However, we get the following error during the "Prepare Build for App Store Connect" phase: Archive - iOS encountered a failure that caused the build to fail. Prepare Build for App Store Connect ITMS-90166: Missing Code Signing Entitlements. No entitlements found in bundle 'com.***.***.iOS-NotificationService-Ext' for executable 'Payload/***.app/PlugIns/iOS-NotificationService-Ext.appex/iOS-NotificationService-Ext'.' An entitlement is missing for our notification service extension? It is strange knowing that we can build, archive and upload to App Store Connect successfully locally from any Xcode.. It just fails with Xcode Cloud making the service sadly useless for us. Any idea? recommendation?
Posted Last updated
.
Post not yet marked as solved
1 Replies
581 Views
I build my iOS app on a machine(build machine- MacMini Xcode 13.2.1) with a valid distribution profile/certificate and upload it to our in-house distribution center (AppCenter) where the other registered devices(test devices) can download & run the app. At some point in the past, something has been changed and all devices after receiving the build and downloading the app, right at the launch time seeing the crash of the app- the log in console says: error 15:31:47.331479-0500 SpringBoard Bootstrapping failed for <FBApplicationProcess: 0x153da32f0; application<com.myapp.companyname>:> with error: <NSError: 0x280139ec0; domain: RBSRequestErrorDomain; code: 5; reason: "Launch failed."> { NSUnderlyingError = <NSError: 0x280138ea0; domain: NSPOSIXErrorDomain; code: 85>; } error     16:39:27.769869-0500  SpringBoard       Scene FBSceneManager/sceneID: com.myapp.companyname update failed: <NSError: 0x2820ec360; domain: FBSceneErrorDomain; code: 1 (operation-failed); reason: "Scene update failed."> {    NSUnderlyingError = <NSError: 0x2820dfc90; domain: FBWorkspaceScene; code: 1; reason: "Client process exited.">; } I believe this is something about an invalid certificate that does not let the app launch on other machines. I did a quick test: instead of using my build machine, I used the same distribution profile on another machine and build the same Xcode project and when I upload IPA to AppCenter, the other devices can run the app perfectly. I checked the emebedded.mobileprovision file content from both machines(one that works on all machines, and one that crashes on all machines: that is my build machine) and they look similar (certification date, Identifiers, Developer certificates, entitlements, expiration... ) Any idea what could be wrong? or what other places I can search for the reason for the crash? It's very frustrating!! btw, I tried to remove the cache data, restart the machine,...etc but no luck -seems all builds from the build machine won't be able to run on any devices! Any help is appreciated, Camron
Posted
by Camron.
Last updated
.
Post not yet marked as solved
16 Replies
3.4k Views
Hi everyone, My app was rejected for containing Game Center entitlement, here is what review team respond: Your app contains the Game Center entitlement, but it does not link against the GameKit framework. And they suggest a solution: If you do not intend to use Game Center, please remove the Game Center entitlement. My app does not have Game Center entitlement enabled, but App Identifier do have it enabled by default. The App Identifier was created years ago, and by then the Game Center was enabled mandatory, I can't deselect it since the disable button was grayed out. I thought Apple may has changed this behavior when received rejection, so I tried to disable Game Center again, but after I deselect Game Center for macOS and try to save it on developer portal, it warns me: There is a problem with the request entity Please select at least one configuration for Game Center. Is there anything I missed? Thank you in advance for any possible help. Regards,
Posted
by yang.y.
Last updated
.
Post not yet marked as solved
2 Replies
14k Views
I'm trying to monetize my app with MoPub for iOS 14, but my ad is not being shown and I get some errors that include Target is not running or required target entitlement is missing. According to MoPub Support, this is NOT a problem with MoPub -- it's a problem with my app configuration. However, the problem only occurs if the MoPub framework is added to the project. Here are the relevant logs: Initialized OM SDK version: 1.3.4-Mopub Attempting to load ad [assertion] Error acquiring assertion: Error Domain=RBSAssertionErrorDomain Code=3 "Target is not running or required target entitlement is missing" UserInfo={RBSAssertionAttribute=RBSDomainAttribute| domain:"com.apple.webkit" name:"Background" sourceEnvironment:"(null)", NSLocalizedFailureReason=Target is not running or required target entitlement is missing} [ProcessSuspension] 0x10b0b8bc0 - ProcessAssertion: Failed to acquire RBS Background assertion 'WebProcess Background Assertion' for process with PID 18829, error: Error Domain=RBSAssertionErrorDomain Code=3 "Target is not running or required target entitlement is missing" UserInfo={RBSAssertionAttribute=RBSDomainAttribute| domain:"com.apple.webkit" name:"Background" sourceEnvironment:"(null)", NSLocalizedFailureReason=Target is not running or required target entitlement is missing} SDK initialized and ready to display ads. Initialized adapters: No adapters initialized Could not signal service com.apple.WebKit.WebContent: 113: Could not find specified service Could not signal service com.apple.WebKit.Networking: 113: Could not find specified service I tried integrating the MoPub framework manually, and via cocoa pods -- with the same outcome. Question: What entitlement(s) do I need to add to my app, assuming that this is an entitlements issue? How do I fix these errors? Thank you! Edit: I tried adding the "Access WiFi Information" capability and also the "App Transport Security Settings" - "Allow Arbitrary Loads" .plist entry, to no avail.
Posted
by JoeWest.
Last updated
.
Post marked as solved
4 Replies
263 Views
I'm working on an app which will detect smart-hubs (manufactured by my client) on the local network. There are a few things I need to do: Send UDP Packets to a broadcast address. Receive UDP Packets that have been broadcast to the same address. Use a NWBrowser to find devices which advertise as _mydevice._tcp. In the simulator this is all working well. It will not even build for my development device (iPhone SE running iOS 15.4.1) I have added the NSBonjourServices array, NSLocalNetworkUsageDescription string, and com.apple.developer.networking.multicast boolean into my entitlements file. However xCode is unable to update the provisioning profile: I have tried to follow all Quinn's instructions that lead to this page. but I must be missing something because there is no "Additional Capabilities" tab for my App ID and I cannot see anywhere to request/set the NSBonjour entitlements or udp multicast entitlements for the AppID. I have tried to read the documentaion but getting nowhere. I have missed a secret step somewhere! Please help me get this working. It is vital for our app.
Posted Last updated
.
Post not yet marked as solved
0 Replies
177 Views
Our engineering team is near completion of integration of the Visa SDK for iOS Add to Mobile Wallet function for our user's debit card which we issue. Creating the Pass Type ID certificate was easy, but getting permission to use it from Apple has been extremely difficult. We submitted our request on April 22nd to the applepayentitlements email address. We got a response from them on April 26th, 4 days later asking for additional information & providing a 9-digit follow-up identifier. We provided the new information in a response, but have never heard back. It is now May 10th. I have tried all manner of support requests & have no idea where to go next.
Posted
by gameugami.
Last updated
.
Post not yet marked as solved
3 Replies
856 Views
I have a command line tool and am trying to connect to a USB device using:    _device = [[IOUSBHostDevice alloc] initWithIOService:_service    options:IOUSBHostObjectInitOptionsDeviceCapture    queue:_queue    error:&error    interestHandler:^(IOUSBHostObject * _Nonnull hostObject, uint32_t messageType, void * _Nullable messageArgument) {     NSLog(@"Interest handler...");    }]; However, when I run this tool (even under sudo), I'm hitting the error: Error:Unable to open io&#92;&#95;service&#92;&#95;t object and create user client. with reason: Exclusive open of usb object failed. The documentation for IOUSBHostObjectInitOptionsDeviceCapture implies that using this option and having root privilege should gain exclusive access to the device. The alternative is to use an entitlement, but the executable is terminated immediately in that case probably due to code signing. I would have expected that running the tool under sudo would have been sufficient to avoid this issue. I just want to first get things working locally on my Mac for a proof of concept, so I don't really want to deal with code signing up front unless that is absolutely necessary. What do I need to do to get exclusive access to the USB device? Thanks in advance.
Posted
by tompmtv.
Last updated
.
Post marked as solved
15 Replies
2.1k Views
I can't find a way how to create a Developer ID Provisioning profile with Network Extension entitlements. On developer.apple.com I have App ID with "Network Extensions" selected. Then I create a Developer ID provisioning profile for this app. When I try to export this app in xcode, I always get the same error: "Profile doesn't match the entitlements file's value for the com.apple.developer.networking.networkextension entitlement." PP entitlement for network extension looks like this: <key>com.apple.developer.networking.networkextension</key> <array> <string>packet-tunnel-provider-systemextension</string> <string>app-proxy-provider-systemextension</string> <string>content-filter-provider-systemextension</string> <string>dns-proxy-systemextension</string> <string>dns-settings</string> </array> Any ideas what's wrong?
Posted Last updated
.
Post not yet marked as solved
1 Replies
119 Views
I have created a test app using python3.9.12 version and pyinstaller version 5.0.1. The .pkg is getting created successfully but during runtime getting the below error: ImportError: dlopen(/Applications/TestApp/Contents/MacOS/lib-dynload/binascii.cpython-39-darwin.so, 2): Library not loaded: /opt/local/lib/libz.1.dylib   Referenced from: /Applications/TestApp/Contents/MacOS/lib-dynload/binascii.cpython-39-darwin.so   Reason: no suitable image found.  Did find: /opt/local/lib/libz.1.dylib: code signature in (/opt/local/lib/libz.1.dylib) not valid for use in process using Library Validation: mapped file has no cdhash, completely unsigned? Code has to be at least ad-hoc signed. I have tried disabling library validation, it dint work for me. are there any solution available for this?
Posted
by sudhakark.
Last updated
.
Post not yet marked as solved
2 Replies
265 Views
I am getting an invalid binary when submitting my app for review. I am able to upload the build and run it as a pre-production beta on my device using TestFlight. I was under the assumption invalid binary checks were done when the app was uploaded and you would get an invalid binary for an entitlement or plist issue. However, I did not get any of these errors when uploading. I only get them when submitting to the App Store Review Team for review. My core problem is that invalid binary is nondescript and there is no way to trouble shoot this problem without knowing what exactly makes my entitlements and/or plist get flagged by production checks as invalid (binary seems entirely inaccurate here but I’ll go with it). Really, I’m not going to post my code here and it’s not an Xcode specific/versioning issue, like previous posts have mentioned. I’d really like an Apple professional to send me what I’m missing in my entitlements or plist (they do this) or a poster to tell me where I can go to determine, after an upload, where an invalid binary was flagged so I can get the error code and fix it. I’m also curious (as an aside) if Apple has the ability to reject apps for an invalid binary, bypassing the automated production checks in the backend. I’m sure Apple has the capability to give permissions to do it but I’m curious whether there is technical implementation to allow this to occur. I feel like it’s weird for me to pass checks when uploading (required to upload and TestFlight any app) and fail when going to the review team (no reason to redundantly recheck checks already completed on a local machine in Xcode and during the upload process with another re-re-check). I guess it doesn’t hurt to check your re-check and re-check your re-check but then the question becomes if this is an indication of a deeper problem with code in the backend that an engineer isn’t fixing/maintaining properly. Any information would be appreciated.
Posted
by mdbench.
Last updated
.
Post not yet marked as solved
1 Replies
286 Views
Hi there, I know here is not the right place to ask this question as title, but It's been 3 weeks I haven't got any responses, even I asked the status through the mail. Could someone please help me to check it? My Network Extension framework request-Follow-up ID is 792333531. I hope my request is still processing rather than lost it. Thank you so much!
Posted Last updated
.
Post not yet marked as solved
7 Replies
6.8k Views
Whenever I fresh install my app onto my device, it is not showing up in the Settings app. Even after trying to search it, nothing appears. I use location services and local network within my application so I need to be able to change those authorizations as it does not reliably prompt for those authorizations (I need always for location and that was removed, local network never prompts correctly). I have however seen my app appear in the settings app under privacy -> Location Services but not local network. Is this an issue with Apple or with my application? Should also be known that it does appear in settings on some devices.
Posted Last updated
.